Certificate Root Stores: An Area of Unity or Disparity?

Abstract

Organizations like Apple, Microsoft, Mozilla and Google maintain certificate root stores, which are used as trust anchors by their software platforms. Is there sufficient consensus on their root-store inclusion and trust policies? Disparities appear astounding, including in the government-owned certificates that they trust. Such a status-quo is alarming.

References in corpus (2)

• SoK: Delegation and Revocation, the Missing Links in the Web's Chain of Trust
• Characterizing the Root Landscape of Certificate Transparency Logs